Talos Interactive Threat Intelligence

Talos, a leading provider of cutting-edge security research globally, analyzes 100s of billions of DNS requests and other telemetry data daily. It continuously runs AI, statistical, and machine learning models against this massive database to provide insight into cyber threats and improve incident response rates. 

• Uncover malicious domains, IPs, malware, and URLs before they’re used in attacks.

• Prioritize incident investigations.

• Speed incident investigations and response.

• Predict future attack origins by pinpointing and mapping out attackers’ infrastructures.

DNS Layer Security

A differentiating first line of defense.

• Deploy enterprise-wide in minutes.

• Block malware, phishing, CNC callbacks—from anywhere.

• Prevent or limit visits to nefarious web sites from guest Wi-Fi networks.

• Stop threats at the earliest point to reduce triage of alerts.

• Accelerate internet access; only proxy risky domains.

• Deploy enterprise-wide in minutes.

Multimode DLP

Analyze sensitive data in-line to provide visibility and control over sensitive data leaving your organization.  

• API-based DLP functionality for out-of-band analysis of data at rest in the cloud.

• 190+ built-in content classifiers including GDPR, PCI-DSS, HIPAA, PII, and PHI.

• Inspection of cloud app and web traffic content and enforcement of data policies.

• Detection and reporting on sensitive data usage and drill-down reports to help identify misuse.

• Ability to assign DLP policies to AI applications to help users more safely use publicly available AI services like ChatGPT; protecting against IP loss or IP contamination by detecting and blocking risky content.

• API-based functionality is supported on the following apps: Box Cloud Storage, ChatGPT, OpenAI ChatGPT API, Concur Invoice, Confluence, DLPTest.com, Dropbox, Facebook Messenger, Gmail, Jira, LinkedIn SlideShare, Monday, PasteBin, SalesForce, ServiceNow, ShareFile, Slack, SmartSheet, WeTransfer, WorkDay HCM, Yahoo Mail.

AMP (Advanced Malware Protection)

Detect hidden attack methods and report on malicious files.

• Advanced sandboxing with threat intelligence in one unified solution.

• Speed Threat hunting and incident response via single, correlated source of intelligence.

• API’s to enrich security data and integrate with XDR or commonly used SIEMs.

• Access to the full Secure Malware Analytics console.

• Single, correlated source of intelligence to speed threat hunting and incident response.

• Retrospective notification if file disposition changes (originally good / later deemed malicious).

Sandbox

Execution of malicious files.

• Access to the full Secure Malware Analytics console.

• Advanced threat intelligence.

• Execution of malicious files in a glovebox. 

• Track file execution actions.

• Capture network activity generated by the file.

• Isolated testing environment.

App connectors

• Provides secure connectivity and simplifies administrative tasks in establishing connectivity to private applications.